diff --git a/rust/stub/Cargo.toml b/rust/stub/Cargo.toml
index f06d981..2386e76 100644
--- a/rust/stub/Cargo.toml
+++ b/rust/stub/Cargo.toml
@@ -10,7 +10,7 @@ rust-version = "1.68"
 uefi = { version = "0.21.0", default-features = false, features = [ "alloc", "global_allocator" ] }
 uefi-services = { version = "0.18.0", default-features = false, features = [ "panic_handler", "logger" ] }
 goblin = { version = "0.6.1", default-features = false, features = [ "pe64", "alloc" ]}
-bitflags = "2.2.1"
+bitflags = "2.3.1"
 
 # Even in debug builds, we don't enable the debug logs, because they generate a lot of spam from goblin.
 log = { version = "0.4.17", default-features = false, features = [ "max_level_info", "release_max_level_warn" ]}
diff --git a/rust/tool/Cargo.toml b/rust/tool/Cargo.toml
index 4021a5d..125c6c6 100644
--- a/rust/tool/Cargo.toml
+++ b/rust/tool/Cargo.toml
@@ -11,10 +11,10 @@ path = "src/main.rs"
 
 [dependencies]
 anyhow = "1.0.71"
-clap = { version = "4.2.7", features = ["derive"] }
+clap = { version = "4.3.0", features = ["derive"] }
 goblin = "0.6.1"
 nix = { version = "0.26.2", default-features = false, features = [ "fs" ] }
-serde = { version = "1.0.162", features = ["derive"] }
+serde = { version = "1.0.163", features = ["derive"] }
 serde_json = "1.0.96"
 tempfile = "3.5.0"
 bootspec = "1.0"